Lenker Group

1. Controller and scope

Website operator and controller: Lenker Solutions Építőipari Korlátolt Felelősségű Társaság
Registered short name: Lenker Solutions Építőipari Kft.
Registered office and postal address: 4287 Vámospércs, Vágóhíd utca 29., Hungary
Company registration number: 09-09-037250
Company registration court: Company Court of the Debrecen Regional Court
Hungarian tax number: 32895441-2-09
Website: lenkergroup.hu

This notice covers use of lenkergroup.hu and its English version, enquiries sent to the central address and job applications identified as Lenker Group applications. The Group’s online application form runs at lenkersolutions.hu/jelentkezes, with Group identification and info@lenkergroup.hu as the recipient. Send privacy requests to info@lenkergroup.hu or the postal address above. Other processing on separate company websites is described in their own notices.

2. Browsing, local search and technical operation

When a page is delivered, the hosting infrastructure receives the IP address, request time and URL, and technical headers sent by the browser. Processing for delivery and protection against misuse is based on the legitimate interest in secure website operation under Article 6(1)(f) GDPR.

The website application does not maintain its own visitor-log database. Provider technical and security data are retained for the period necessary to operate the service, investigate faults or misuse and meet legal obligations under the provider’s terms. You can also ask the controller about the applicable provider retention and transfer conditions.

When a form is submitted, the server validates the details and file and uses IP-based rate limiting to prevent misuse. Rate-limit data are held in transient server memory without a separate database; the IP address is not included in the enquiry email or measurement event. This technical protection is based on the legitimate interest in secure operation.

The site search runs in the browser against an index downloaded from the same domain. It does not send the search term to a search provider or store it persistently. Language switching uses links to the relevant language version.

The embedded Google map in the footer loads automatically when the page opens, without a separate click. When the map loads, the browser automatically connects to Google. Google may then receive your IP address and technical browser information, and may use its own cookies under its Privacy Policy. We do not store a separate map-loading choice. The analytics and advertising switches in Cookie settings do not control map loading.

Google – privacy policy

3. Enquiries and business contact

The enquiry form processes the selected area and any specialty, location, project stage, timing, description, name, email address and any company name or phone number provided. An attachment is optional; the form accepts one PDF, PNG, JPG, DOC or DOCX file of up to 5 MB. Until submission, completed details remain in browser memory and are not saved to the website’s own database or persistent browser storage.

Selecting the send button passes the details and attachment through the server endpoint at lenkersolutions.hu to the Resend email service for forwarding to info@lenkergroup.hu. Submission includes a technical reference identifier. If the URL contains utm_source, utm_medium or utm_campaign parameters, these may appear in the reviewable project summary and enquiry. The summary can be copied or downloaded for your records, placing it on your clipboard or device.

Received data are used to respond, clarify the task and prepare a quotation. For an individual acting on their own behalf, the basis is taking pre-contractual steps at their request under Article 6(1)(b) GDPR. For business contacts and general business enquiries, the basis is the legitimate interest in answering enquiries and maintaining business communication under Article 6(1)(f).

Enquiries that do not lead to a contract are retained for no longer than 12 months after the last substantive communication. If a contract is concluded, relevant data are retained as necessary for performance, applicable legal obligations and specific legal claims. Mandatory retention of accounting records does not automatically apply to all enquiry emails.

For closed enquiries, only records necessary to clarify related questions or address a specific legal claim are retained within the maximum above on a legitimate-interest basis. If the purpose ends earlier and no other retention ground applies, the data are deleted earlier.

4. Job applications

For job applications, we process your name, email address, chosen role, any optional phone number and short introduction, and your CV for selection and communication. The online form requires one PDF, DOC or DOCX CV of up to 5 MB. The server on the Lenker Solutions domain uses Resend to forward Group-identified applications to info@lenkergroup.hu. You may also apply directly by email. Applications for a specific position are based on pre-contractual steps towards an employment contract at the applicant’s request under Article 6(1)(b) GDPR.

Data from unsuccessful applications are deleted within no more than 90 days after selection closes. If an applicant withdraws earlier, we also take account of the end of the selection purpose. Applications are not retained for future vacancies without separate, voluntary and time-limited consent. Successful applicants receive separate employee privacy information for data needed for employment.

Applications sent to the central address are received by Lenker Solutions Építőipari Kft. Communication will clarify which company would be the employer; applications are not automatically circulated to all group members. Before involving another company, we provide information about the recipient, purpose and applicable legal basis.

Do not include identity-document copies, health data, criminal-record certificates or other sensitive data unnecessary for assessing an initial application.

For introductions not tied to a specific vacancy, we rely on the legitimate interest in clarifying current opportunities under Article 6(1)(f) GDPR. If there is no relevant open selection process, the introduction is deleted within no more than 90 days of receipt. Mentioning future opportunities does not in itself constitute consent to a lasting applicant database.

Limited retention for up to 90 days after unsuccessful selection is for handling selection-related questions and possible legal claims, based on the corresponding legitimate interest under Article 6(1)(f) GDPR. Retention periods are maxima: where data cease to be necessary earlier and no other legal basis applies, we delete them earlier.

5. Required and optional information

No contact information is required to view the website. Marked basic enquiry fields are needed to understand and answer your request; company name, phone number and attachment are optional. Online job applications require a name, email address, position and CV; phone number and introduction are optional. The checkbox acknowledging the privacy notice is not newsletter or marketing consent. Without the necessary information, we may be unable to respond fully. Incoming enquiries do not automatically subscribe you to a newsletter.

6. Access, recipients and providers

Enquiries are accessible to authorised staff involved in responding or recruitment. We do not sell enquiry or applicant data. Disclosure to authorities or professional service providers requires an appropriate legal basis and is limited to what is necessary for the purpose.

OpenAI Sites delivers the website on Cloudflare infrastructure. The Lenker Solutions server endpoint on Cloudflare validates enquiry and Group-identified application data; Resend – Plus Five Five Inc. (United States) then forwards them to the central mailbox, which uses Google Workspace / Gmail. Submitted details and attachments therefore also pass through these technical providers during delivery. The website does not create its own enquiry or applicant database; retention of received emails and provider technical data is a separate matter.

The international operation of these services may involve processing outside the EEA. You may ask the controller for details of applicable transfer conditions, countries involved and safeguards under Chapter V GDPR. Current provider information is linked below.

The published OpenAI, Google and Resend data processing terms include European Commission standard contractual clauses (SCCs) for third-country transfers within their scope. Resend states that its primary processing takes place in the United States. You can ask about the terms for the specific accounts and services, the safeguards that actually apply and request copies at info@lenkergroup.hu.

7. Cookies, measurement and advertising

Google Analytics, Google Ads and Meta Pixel are planned but none is activated when this notice is published. The website currently sends no visitor data to them. Before activation, we will specify the services, data, purposes, cookies and retention periods according to the actual configuration and request a new choice.

Optional analytics and marketing services require prior, voluntary consent under Article 6(1)(a) GDPR. Refusing them does not prevent use of the website, enquiry form or application options. Your choice can be changed at any time through Cookie settings in the footer.

Detailed cookie notice

8. Security and automated decisions

The website uses HTTPS. Received data may only be accessed by people with the permissions needed for their tasks. Avoid sending confidential documents from public or shared devices without suitable protection; downloaded briefs and clipboard contents remain on your device.

The website does not make solely automated decisions producing legal or similarly significant effects on visitors. Any future audience building by the planned advertising services may only be used under the settings and consent explained at that time.

9. Your rights

You may request information, access, a copy of your data and correction of inaccurate data.
Where legal conditions are met, you may request deletion or restriction of processing.
You may object to legitimate-interest processing on grounds relating to your situation, and may object to direct marketing at any time.
You may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.
For automated processing based on consent or contract, you may request portability subject to the GDPR conditions.

Send requests to info@lenkergroup.hu. We respond without undue delay and within one month; complex cases may justify an extension of up to two further months, with notice during the first month. If identity is uncertain, we request only additional information necessary for verification. Requests and the first copy are generally free of charge.

Where a specific legal claim or mandatory retention applies, records necessary for that purpose may be retained separately under the applicable basis and period. Our response will explain this; it does not permit blanket or unlimited retention.

10. Complaints and remedies

If you believe processing infringes your rights, you may contact the controller, complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) and seek a judicial remedy. Contacting the controller first is not a condition for a supervisory complaint.

NAIH address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
NAIH postal address: 1363 Budapest, Pf. 9., Hungary
NAIH telephone: +36 1 391 1400

To initiate a formal procedure, use the submission methods described on the NAIH website; ordinary customer-service email cannot initiate an official procedure.

11. Changes to this notice

We update this notice when actual processing changes and identify the version and date. Existing cookie consent is not automatically reused for new purposes or materially changed optional measurement.

Privacy notice